chaospatterns

I’ve been a customer of SoYouStart, now the OVH Eco series for many years. For $30/mo, I get 32GB of RAM and 480GB of disk space. Plenty of space for me to run my too many different services.

I’ve found them cost effective

For inbound, I use Postfix + rspamd + dovecot directly to my server. Outbound, I used to send it directly from my server. I did this 15+ years with DKIM, DMARC, and SPF. It worked well for like 95% of the emails I sent, but I started relaying through smtp2go.com after I had just a couple really important emails not get delivered or me not be sure if the recipient saw them.

Yeah it’s useful and I’ve been using it for my home lab, but too many of my containers want outbound connections to the Internet. Like Forgejo needs :443 to be able to mirror or remote push repositories, so either I have to identify and allow list github.com, gitlab.com, etc. or end up allowing 0.0.0.0/0:443 which is not very strong protection.

I’d love for some kind of CNI or network plugin that filtered based on domain name.

Since you’re using Kubernetes, have you looked at external-dns? In my home lab, I use external-dns to take Ingress and Service resources and register them into my internal DNS zone. I use the etcd backend. external-dns registers zones in etcd, then CoreDNS queries from etcd. As soon as I create a new Ingress, it’s automatically registered and pointing to my Traefik service.

github.com/kubernetes-sigs/…/coredns-etcd.md

It’s a small model that runs on your machine using a TFLite model. AI/ML models come in many different sizes. Some more conducive for running locally than others. There’s more info on the detection pipeline here.

I didn’t write this, just found and self hosted it.

Its not difficult for technical people like you or me, but my friend who just wants to watch their favorite show on my Plex on their TV won’t know how to traffic engineer the traffic over a Tailscale network to my network.

With Plex, you’re getting the easy ability to grant access to users. You get a single pane that can search across multiple Plex instances, and NAT traversal/port forwarding. Jellyfin makes you figure that out yourself.